SECURITY WARNINGS & Notices - Please post them here

[scythe944]

Critical vulnerability in VLC player
http://www.h-online.com/security/news/item/Critical-vulnerability-in-VLC-player-1175195.html

VLC Media Player 1.1.6 fixes critical vulnerabilities
http://git.videolan.org/?p=vlc/vlc-1.1.git;a=tag;h=f8d04ab27701f659102ccdb628abce9aa5dadc2a
http://www.videolan.org/vlc/releases/1.1.6.html
http://www.videolan.org/vlc/

Well, that was quickly fixed...

[Asyn]

Well, that was quickly fixed...

Yes, open source projects are often quicker in fixing errors/problems than others...
asyn

[Asyn]

Cracker offers access to government servers for a fee
http://krebsonsecurity.com/2011/01/ready-for-cyberwar/
http://blog.imperva.com/2011/01/major-websites-govmiledu-are-hacked-and-up-for-sale.html

[Pondus]

New Scam mail in sirculation, and this time from Tunisia


A letter from a new friend
http://www.norman.com/security_center/blog/per_olav_forland/134881/en

[DavidR]

Nothing new here, just another take on the same old Nigerian 412 fraud theme looking for gullible people.

[bob3160]

Nothing new here, just another take on the same old Nigerian 412 fraud theme looking for gullible people.

Many years ago, I even answered one of these letters and strung the fellow along
for quite a few month. Always left him dangling hoping that with the next email I'd finally consent
to sending him the small percentage of money he wanted as good faith money so that he would be able to send me my millions. 
He never got the good faith money and I never got my millions. 
 

[Pondus]

Nothing new here, just another take on the same old Nigerian 412 fraud theme looking for gullible people.

Many years ago, I even answered one of these letters and strung the fellow along
for quite a few month. Always left him dangling hoping that with the next email I'd finally consent
to sending him the small percentage of money he wanted as good faith money so that he would be able to send me my millions.  
He never got the good faith money and I never got my millions.  
 

Yep here is a user guide if some want to have fun    

E-mail Scams – Have Fun While Scamming the E-mail Scammers
http://www.suite101.com/content/e-mail-scams--have-fun-while-scamming-the-e-mail-scammers-a326407

and here is one that did it
http://www.cracked.com/article_16234_having-fun-with-419-scammers.html

I like the fake bible quotes he is using 

[Asyn]

Fedora infrastructure hacked
http://lists.fedoraproject.org/pipermail/announce/2011-January/002911.html

[malcontent]

Kaspersky finds fake antivirus program in ads on ICQ

http://news.cnet.com/8301-27080_3-20029525-245.html

A Kaspersky researcher has discovered a fake antivirus warning linked to ads on ICQ, which is popular in Russia and Eastern Europe.

The ad that showed up in the ICQ window was for a women's clothing company called Charlotte Russe and clicking on the ad directs to the company's Web site, said Roel Schouwenberg, a senior antivirus researcher at Moscow-based Kaspersky.

Around the same time the ad was displayed another pop-up appeared in a new browser from "Antivirus8," that said suspicious activity was detected on the system and it encouraged the user to download the program, which is not a legitimate antivirus product, Schouwenberg told CNET.

The malware attack is interesting for several reasons. The rogue antivirus "scareware" appears without the user doing anything that normally triggers such pop-ups, such as clicking on malicious links in search results, he said. The attack also does not appear to have an exploit included in it; just the social-engineering aspect in which the user is lured into downloading supposed antivirus protection that is totally unnecessary, he added.

[osants911]

Facebook blames bug for Zuckerberg 'hacking'

http://www.bbc.co.uk/news/technology-12286377

[Asyn]

Critical vulnerability in Opera web browser
http://www.h-online.com/security/news/item/Critical-vulnerability-in-Opera-web-browser-1175689.html

Fixed in Opera 11.01
http://www.opera.com/docs/changelogs/windows/1101/

[Charyb-0]

http://www.securecomputing.net.au/News/245426,trojan-built-to-disable-cloud-antivirus.aspx

Trojan to disable cloud AV.

[Lisandro]

http://www.securecomputing.net.au/News/245426,trojan-built-to-disable-cloud-antivirus.aspx
Trojan to disable cloud AV.

Hope avast add signatures for this quickly...

[SpeedyPC]

http://www.securecomputing.net.au/News/245426,trojan-built-to-disable-cloud-antivirus.aspx
Trojan to disable cloud AV.

Hope avast add signatures for this quickly...

+1 Or my PC will get killed

[Pondus]

A more secure Facebook
http://www.norman.com/security_center/blog/per_olav_forland/135128/en